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IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) An apparatus for encrypting block data of a first size 
comprising: 

encrypting sections connected in series, each of the encrypting sections 
comprising[[:]]^ 

[[a]] first [[unit]] units each configured to randomize first subblock data which are 
obtained by dividing the block data[[;]]i and 

a second unit configured to diffuse data output fi-om the first [[unit]] xmits with respect 
to the first size a rang e which is wider than a rang e of th e first subblock data and supply a 
result of diffusion to [[a]] first [[unit]] units in a succeeding encrypting section, and wherein 
the first units and the second unit are configured to connect at least one input bit terminal of 
bit of data input to the first units unit in own encr>pting s e ction being transmitt e d to at least 
one bit of data input bit terminal of [[to]] the corresponding first unit in the succeeding 
encrypting section via at least two rout e s paths . 

2 (Canceled). 

3 (Canceled). 

4. (Currently Amended) An apparatus for encrypting block data of a first size, the 
apparatus comprising: 

encrypting sections connected in series, each of the encrypting sections 
comprising[[:]]^ 
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first nonlinear transformation units each configured to perform a nonlinear 

transformation process ever for first subblock data which are obtained by dividing the block 

data[[;]]i and 

a first linear diffusion unit configured to perform a linear difftision process for the 
first subblock ever data output firom the first nonlinear transformation units with respect to 
the first size a range which is wider than a range of th e first subblock data and supply a result 
of the linear diffusion process to first nonlinear transformation units in a succeeding 
encrypting section, 

wherein each of the first nonlinear transformation units comprises[[:]]i 

second nonlinear transformation units each configured to perform a nonlinear 
transformation process for ov e r second subblock data which are obtained by dividing the first 
subblock data[[;]]i and 

a second linear diffusion unit configured to perform a linear diffusion process for the 
second subblock ever data output fi:-om the second nonlinear transformation units with respect 
to the second size, rang e of th e first subblock data, and 

wherein the first nonlinear transformation units, the first linear diffiision unit, the 
second nonlinear transformation units, and the second linear diffusion unit are configured to 
connect at least one input bit terminal bit of data input to one of the first s e cond nonlinear 
transformation units in each of the encrypting s e ctions is transmitt e d to at l e ast one bit of data 
input bit terminal of the corresponding first to on e of th e s e cond nonlinear transformation 
units in the succeeding encrypting section via at least two rout e s paths . 

5. (Currently Amended) The apparatus according to claim 4, wherein 
input bit terminals of a second non-linear transformation unit are connected to input 
bit terminals of a corresponding second nonlinear transformation unit in the succeeding first 
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nonlinear transformation unit via at least two paths the second nonlin e ar tranGformation unit 
in the first nonlin e ar transformation unit compris e s a first half s e cond nonlin e ar 
transformation units pr e ceding th e s e cond lin e ar diffusion unit and s e cond half second 
nonlinoor transformation units succ ee ding th e s e cond lin e ar diffusion unit, and th e first lin e ar 
diffusion unit in e ach of th e e ncrypting s e ctions suppli e s an e xclusive OR value of at l e ast 
two outputs from th e s e cond - half s e cond nonlin e ar transformation units to at l e ast on e input 
to th e first half s e cond nonlin e ar transformation units in the succeeding e ncrypting s e ction . 

6, (Currently Amended) The apparatus according to claim 4, wherein 
input bit terminals of more than one of the second nonlinear transformation units are 
connected to input bit terminals of corresponding second nonlinear transformation imits in the 
succeeding first nonlinear transformation unit via at least two paths th e s e cond nonlinear 
transformation unit in the first nonlin e ar transformation unit compris e s a first half s e cond 
nonlin e ar transformation units preceding the second linear diffusion imit and s e cond half 
s e cond nonlin e ar transformation units succ ee ding th e s e cond linear diffusion unit, and 

th e first lin e ar diffusion unit in e ach of th e e ncrypting sections supplies each exclusiv e 

OR value of at l e ast two outputs fi-om th e s e cond half s e cond nonlinear transformation units 

to e ach input to th e first half s e cond nonlin e ar transformation units in the succ ee ding 

encrypting section . 

7 (Canceled). 

8. (Currently Amended) The apparatus according to claim [[7]] 4, wherein the block 
data is 128 bits in length, each of the first subblock data is 32 bits in length , and e ach of the 
second subblock data is 8 bits in l e ngth, th e first lin e ar diffusion unit performs a lin e ar 
diffusion proc e ss on e ight 16 bit data formed of corresponding bits each extract e d firom a 
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respectiv e on e of sixt ee n s e cond subblook data whil e changing a bit e xtracted position . 

9. (Original) The apparatus according to claim 4, wherein the first linear diffusion unit 
is implemented by hardware. 

10. (Currently Amended) The apparatus according to claim 9, wherein an input-output 
characteristic of the first linear diffiision imit is based on multiplication in a ov e r th e Galois 
field. 

1 1 . (Original) The apparatus according to claim 5, wherein the first linear diffiision 
unit is implemented by software. 

12. (Currently Amended) An e ncryption apparatus bas e d on a block oncr>ption 
sch e m e comprising: 

e ncrypting s e ctions conn e ct e d in s e ri e s, 

in which th e first s e ction rec e iv e s 128 bit plaint e xt and e ach of th e s e cond section and 
lat e r s e ctions r e c e iv e s 128 bit block data proc e ss e d by the prec e ding s e ction, e ach of th e 
encrypting s e ctions comprising four first nonlin e ar transformation units each of which 
performs a local linear diffiision proc e ss and a nonlin e ar transformation proc e ss a 
corr e sponding on e of four s e ts of 32 bit data into which 128 bit block data is divid e d; and a 
first diffiision unit for p e rforming a lin e ar diffiision proc e ss using a maximum distance 
separabl e matrix on 128 bit block data in which four s e ts of 32 bit data output from th e four 
first nonlin e ar transformation units are concat e nat e d and outputting th e proc e ss e d 128 bit 
block data to th e n e xt stag e ; 

four first nonlin e ar transformation units which ar e connect e d to first diffiision imit in 
th e last e ncryption unit and r e c e iv e 128 bit block data output from th e first diffusion unit; and 

a first k e y addition unit configur e d to rec e iv e four sots of 32 bit data output from th e 
four first nonlin e ar transformation units and output 128 bit encrypt e d block data by adding 
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128 bit e xt e nd e d k e y data to 128 bit block data which is obtainod by concatenating th e four 
s e ts of 32 bit data output from thos e four first nonlinear transformation units, 

wher e in e ach of th e first nonlin e ar transformation units comprises four second key 
addition units e ach of which adds 8 bit k e y data to a corr e sponding on e of four sots of 8 bit 
data into which th e 32 bit data is divid e d, four s e cond nonlinear transformation units e ach of 
which performs nonlin e ar transformation on a corr e sponding on e of th e outputs of th e s e cond 
k e y addition units, a s e cond diffusion unit for p e rforming a lin e ar diffiision process using a 
maximum di s tanc e s e parabl e tabl e on 32 bit data obtain e d by concatenating the four s e ts of 
8 bit data output from th e four s e cond nonlin e ar transformation units, and four s e ts of third 
key addition units and a third nonlin e ar transformation units conn e ct e d to follow th e s e cond 
diffiision unit, 

each of the first diffiision unit comprises a 16 bit diffiision unit for e ach of 8 bits for 
th e s e cond nonlinear transformation units in preceding and succ ee ding stag e s, th e 16 bit 
diffusion vmit performing a linear diffiision process through a 4 >^ 4 matrix operation bas e d on 
multiplication ov e r the Galois field GF(2 '^ ) or its equivalent circuit, th e matrix op e ration 
b e ing such that four bits at corr e sponding bits positions in four sets of 8 bit data from th e four 
s e cond nonlin e ar transformation units in one first nonlinear transformation s e ction in th e 
pr e c e ding stage ar e talc e n as on e e l e ment on the input side of the matrix op e ration and four 
bits at corr e sponding bit positions in four s e ts of 8 bit data input to the four second nonlin e ar 
transformation s e ction in one first nonlinear transformation processing s e ction in th e 
succ ee ding stag e ar e tak e n as on e e l e ment on the output side of the matrix op e ration, and 

th e 4 ■ '^ 4 matrix op e ration bas e d on multiplication over the Galois field GF(2' ^ ) in th e 
1 6 bit diffiision unit or its e quival e nt circuit transmitting, in any combination of one bit in the 
outputs of a total 16 of s e cond nonlinear transformation units in the four first nonlinear 
transformation proc e ssing units in th e pr e c e ding stag e and on e bit in the inputs of a total 16 
of s e cond nonlin e ar transformation units in th e four first nonlin e ar transformation processing 
units in th e succ ee ding stag e , th e stat e of that one bit in the preceding stage to that on e bit in 
the succ ee ding stag e ov e r a plurality of op e rations paths. 

An apparatus for encrypting block data of 128 bits, the apparatus comprising: 
encrypting sections connected in series, each of the encrypting sections including, 
fovu- first nonlinear transformation units each configured to perform a nonlinear 
transformation process for first subblock data of 32 bits which are obtained by dividing the 
block data, and 
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a first linear diffusion unit configured to perform a linear diffusion process using a 
maximum distance separable matrix for the first subblock data output from the four first 
nonlinear transformation units with respect to the first size and supply a result of the linear 
diffusion process to four first nonlinear transformation units in a succeeding encrypting 
section: 

a key addition unit which adds key data of 128 bits to output data of 128 bits from the 
encrypting section of the last stage, 

wherein an encrypting section of a last stage comprises four nonlinear transformation 
units each configured to perform a nonlinear transformation process for the first subblock 
data of 32 bits, 

wherein each of the first nonlinear transformation units includes stage sections, each 
stage section including, 

four second nonlinear transformation units each configured to perform a nonlinear 
transformation process for second subblock data of 8 bits which are obtained by dividing the 
first subblock data, 

a second linear diffusion unit configured to perform a linear diffusion process for the 
second subblock data output from the second nonlinear transformation units with respect to 
the second size, and 

an adder for adding a key to four second subblock data of 8 bits input to the four 
second nonlinear transformation units, 

wherein a stage section of a last stage comprises four second nonlinear transformation 
units each configured to perform a nonlinear transformation process for the second subblock 
data: 

wherein the first nonlinear transformation units, the first linear diffusion unit, the 
second nonlinear transformation imits, and the second linear diffusion unit are configured to 
connect at least one input bit terminal of the first nonlinear transformation imits to one input 
bit terminal of the corresponding first nonlinear transformation units in the succeeding 
encrypting section via at least two paths, and 

wherein each of the four first nonlinear transformation units divides input data of 32 
bits into eight groups of data of 4 bits which are formed of extracting the input data by every 
8 bits, and the first linear diffusion unit comprises eight subunits each subunit receiving 
corresponding four groups of data of 4 bits output from the four first nonlinear transformation 
units, performing a 4 x 4 matrix operation based on multiplication over a Galois field GF(2^) 



7 



Application No. 09/893,785 

Jleply to Office Action of February 28, 2005 

for the received four groups of data of 4 bits, and outputting four groups of data of 4 bits to 
corresponding four first nonlinear transformation units (103) of the succeeding encrypting 
section. 

13. (Currently Amended) An oncr>ption apparatus bas e d on common key block 
e ncryption sch e m e comprising: 

e ncrypting s e ctions conn e ct e d in s e ri e s in which th e first s e ction r e c e iv e s 6 4 bit 
plaintext and e ach of th e s e cond s e ction and lat e r s e ctions r e c e ives 6 4 bit block data 
proc e ss e d by th e pr e c e ding s e ction, e ach of the encrypting aoctions comprising two first 
nonlin e ar transformation vmits e ach of which performs a local linear diffusion process and a 
nonlin e ar transformation proc e ss a corr e sponding on e of two s e ts of 32 bit data into which 
61 bit block data is divid e d; and a first diffusion unit for p e rforming a lin e ar diffusion 
proc e ss using a maximum distanc e separabl e matrix on 6 4 bit block data in which two sots of 
32 bit data output from th e two first nonlin e ar transformation units ar e concatenated and 
outputting the process e d 6 4 bit block data to th e n e xt stag e ; 

four first nonlin e ar transformation units which are conn e ct e d to first diffusion unit in 
th e last e ncryption unit and r e c e iv e 61 bit block data output from th e first diffusion unit; and 

a first k e y addition unit configur e d to rec e iv e two s e ts of 32 bit data output from th e 
two first nonlinear transformation units and output 6 4 bit e ncrypt e d block data by adding 6 4 
bit common k e y data to 6 4 bit block data which is obtained by concat e nating th e two s e ts of 
32 bit data output from thos e two first nonlin e ar transformation units, 

wh e r e in e ach of th e first nonlin e ar transformation units compris e s four second key 
addition imits each of which adds 8 bit key data to a corr e sponding one of four sets of 8 bit 
data into which th e 32 bit data is divid e d, four second nonlinear transformation units e ach of 
which p e rforms nonlin e ar transformation on a corr e sponding on e of th e outputs of the second 
k e y addition imits, a s e cond diffusion unit for p e rforming a lin e ar diffusion proc e ss using a 
maximum distance separable tabl e on 32 bit data obtain e d by concatenating th e four s e ts of 
8 bit data output from th e four s e cond nonlinear transformation units, and four s e ts of third 
k e y addition units and a third nonlin e ar transformation units conn e ct e d to follow the second 
diffusion unit, 

e ach of th e first diffusion unit comprises a 16 bit diffusion unit for e ach of 8 bits for 
th e s e cond nonlin e ar transformation units in preceding and succeeding stages, the 16 bit 
diffusion unit p e rforming a linear diffusion proc e ss through a 2 v 2 matrix op e ration bas e d on 
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multiplication over th e Galois field GF(2 ' ^) or its e quivalent circuit, th e matrix op e ration 
b e ing such that four bits at corr e sponding bits positions in four sots of 8 bit data firom th e four 
second nonlin e ar transformation units in on e first nonlinear transformation section in the 
preceding stag e ar e talc e n a s on e e l e m e nt on the input side of th e matrix operation and four 
bits at corresponding bit positions in four s e ts of 8 bit data input to th e four second nonlin e ar 
transformation s e ction in on e first nonlinear transformation proc e ssing section in th e 
succ ee ding stag e ar e talc e n as on e e l e ment on th e output sid e of the matrix operation, and 

in th e 2^ 2 matrix op e ration bas e d on multiplication ov e r th e Galois fiold GF(2' ^)4fi 
the 16 bit diffusion unit or its e quival e nt circuit transmitting, in any combination of on e bit in 
the outputs of a total 16 of second nonlin e ar transformation units in th e four first nonlin e ar 
transformation processing units in the preceding stage and on e bit in th e inputs of a total 16 
of s e cond nonlin e ar transformation units in the four first nonlin e ar transformation proc e ssing 
units in th e s ucc ee ding stag e , th e stat e of that one bit in th e pr e c e ding stag e to that one bit in 
the succ ee ding stag e ov e r a plurality of op e rations paths. 

An apparatus for encrypting block data of 64 bits, the apparatus comprising: 
encrypting sections connected in series, each of the encrypting sections including, 
two first nonlinear transformation units each configured to perform a nonlinear 
transformation process for first subblock data of 32 bits which are obtained by dividing the 
block data, and 

a first linear diffiision imit configured to perform a linear diffiision process using a 
maximum distance separable matrix for the first subblock data output fi-om the four first 
nonlinear transformation units with respect to the first size and supply a result of the linear 
diffusion process to four first nonlinear transformation units in a succeeding encrypting 
section: 

a key addition unit which adds key data of 128 bits to output data of 64 bits fi-om the 
encrypting section of the last stage, 

wherein an encrypting section of a last stage comprises two nonlinear transformation 
units each configured to perform a nonlinear transformation process for the first subblock 
data of 32 bits, 

wherein each of the first nonlinear transformation units includes stage sections, each 
stage section including. 
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four second nonlinear transformation units each configured to perform a nonlinear 
transformation process for second subblock data of 8 bits which are obtained by dividing the 
first subblock data, 

a second linear diffusion unit configured to perform a linear diffusion process for the 
second subblock data output fi-om the second nonlinear transformation units with respect to 
the second size, and 

an adder for adding a key to four second subblock data of 8 bits input to the four 
second nonlinear transformation units, 

wherein a stage section of a last stage comprises four second nonlinear transformation 
units each configured to perform a nonlinear transformation process for the second subblock 
data, 

wherein the first nonlinear transformation units, the first linear diffiasion unit, the 
second nonlinear transformation imits, and the second linear diffusion unit are configured to 
connect at least one input bit terminal of the first nonUnear transformation units to one input 
bit terminal of the corresponding first nonlinear transformation units in the succeeding 
encrypting section via at least two paths, and 

wherein each of the two first nonlinear transformation units divides input data of 32 
bits into eight groups of data of 4 bits which are formed of extracting the input data by every 
8 bits, and the first linear diffusion unit includes eight subunits each subunit receiving 
corresponding two groups of data of 4 bits output fi-om the two first nonlinear transformation 
units, performing a 2 x 2 matrix operation based on multiplication over a Galois field GF(2^) 
for the received two groups of data of 4 bits, and outputting two groups of data of 4 bits to 
corresponding two first nonlinear transformation units of the succeeding encrypting section. 

14. (Currently Amended) A method for encrypting block data of a first size 
comprising: 

randomizing first subblock data which are obtained by dividing the block data; 
diffusing the randomized data with respect to the first size a rang e which is wider than 
a rang e of the first subblock data ; and 
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repeating the randomizing and the diffusing, wherein at least one bit input to the 

randomizing operation two bits of th e randomiz e d data is reflected on one bit input to the 

next randomizing operation via at least two paths of data to bo randomized next . 

15. (Currently Amended) An article of manufacture comprising a computer readable 
medium having including a computer program embodied therein, the computer program 
comprising: 

computer readable program code means for causing a computer to randomize first 
subblock data which are obtained by dividing plaintext block data of a first size : 

computer readable program code means for causing a computer to diffuse the 
randomized data with respect to the first size a range which is wid e r than a rang e of th e first 
subblock data ; and 

computer readable program code means for causing a computer to repeat the 
randomizing and the diffusing, wherein at least one bit input to the randomizing operation 
two bits of th e randomiz e d data is reflected on one bit input to the next randomizing 
operation via at least two randomizing and diffusing paths of data to b e randomiz e d next . 

16. (Currently Amended) An apparatus for decrypting encrypted block data 
comprising: 

decrypting sections connected in series, each of the decrypting sections 
comprising[[:]]^ 

[[a]] first [[unit]] units each configured to randomize first subblock data which are 
obtained by dividing encrypted block data[[;]]^ and 

a second unit configured to diffuse data output from the first unit units with respect to 
the first size a range which is wid e r than a range of th e first subblock data and supply a result 
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of diffusion to [[a]] first «ftit units in a succeeding encrypting section, and wherein the first 
units and the second imit are configured to connect at least one input bit terminal of btt-ef 
data input to the first units unit in own e ncrypting s e ction b e ing transmitt e d to at l e ast one bit 
of data input bit terminal of [[to]] the corresponding first unit in the succeeding encrypting 
section via at least two rout e s paths . 

17. (Currently Amended) A method for decrypting encrypted block data of a first size 
comprising: 

randomizing first subblock data which are obtained by dividing the encrypted block 

data; 

diffusing the randomized data with respect to the first size a rang e which is wid e r than 
a rang e of th e first subblock data ; and 

repeating the randomizing and the diffusing, wherein at least one bit input to the 
randomizing operation two bits of th e randomiz e d data is reflected on one bit input to the 
next randomizing operation via at least two paths of data to b e randomiz e d n e xt . 

18, (Currently Amended) An article of manufacture comprising a computer readable 
medium having including a computer program embodied therein, the computer program 
comprising: 

computer readable program code means for causing a computer to randomize first 
subblock data which are obtained by dividing encrypted block data of a first size : 

computer readable program code means for causing a computer to diffuse the 
randomized data with respect to the first size a rang e which is wid e r than a rang e of the first 
subblock data ; and 
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computer readable program code means for causing a computer to repeat the 

randomizing and the diffusing, wherein at least one bit input to the randomizing operation 

two bits of the randomiz e d data is reflected on one bit input to the next randomizing 

operation via at least two randomizing and diffusing paths of data to b e randomized next . 
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